Access control: Add access control based permissions to admins/users (#32409)

Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com>

pkg/services/accesscontrol/roles_test.go

@@ -0,0 +1,35 @@
+package accesscontrol
+
+import (
+	"sort"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestPredefinedRoles(t *testing.T) {
+	for name, r := range PredefinedRoles {
+		assert.Truef(t,
+			strings.HasPrefix(name, "grafana:roles:"),
+			"expected all predefined roles to be prefixed by 'grafana:roles:', found role '%s'", name,
+		)
+		assert.Equal(t, name, r.Name)
+		assert.NotZero(t, r.Version)
+		// assert.NotEmpty(t, r.Description)
+	}
+}
+
+func TestPredefinedRoleGrants(t *testing.T) {
+	for _, v := range PredefinedRoleGrants {
+		assert.True(t,
+			sort.SliceIsSorted(v, func(i, j int) bool {
+				return v[i] < v[j]
+			}),
+			"require role grant lists to be sorted",
+		)
+		for _, r := range v {
+			assert.Contains(t, PredefinedRoles, r)
+		}
+	}
+}